RE: password protection in office XP documents

["Tim Laureska" <hometeam () goeaston net>]

If I create a doc in Word XP (2002) and set a password on it, change the
extension to hmtl and open it in a text editor or word, it just comes up
with gibberish ... it doesn't come back up in plain text .... because of
the password?  I couldn't see the actual document

-----Original Message-----
From: matt willson [mailto:mwillson () sbcglobal net] 
Sent: Monday, June 16, 2003 7:06 PM
To: 'John Benstead'; security-basics () securityfocus com
Subject: RE: password protection in office XP documents

Common known flaw with microsoft, and their program recognizing by file
extension method, is that if you rename a file (by right clicking the
file and hititng rename)blah.doc into blah.html then choosing the
program to open it up with, you have got a bypass.


-----Original Message-----
From: John Benstead [mailto:jjbenstead () msn com] 
Sent: Sunday, June 15, 2003 4:15 PM
To: security-basics () securityfocus com
Subject: Re: password protection in office XP documents

In-Reply-To: <003b01c331c8$3e992530$6f01a8c0@Laptop1>

Unless you know something that I don't (and that could be the case), you

will need the password for the document in order to open the document
and 
then save as an HTML.

------------------------------------------------------------------------
---
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top
analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.
     
Find out why, and see how you can get plug-n-play secure remote access
in
about an hour, with no client, server changes, or ongoing maintenance.
          
Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
------------------------------------------------------------------------
----


------------------------------------------------------------------------
---
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top
analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.
     
Find out why, and see how you can get plug-n-play secure remote access
in
about an hour, with no client, server changes, or ongoing maintenance.
          
Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
------------------------------------------------------------------------
----





---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.
     
Find out why, and see how you can get plug-n-play secure remote access in
about an hour, with no client, server changes, or ongoing maintenance.
          
Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
----------------------------------------------------------------------------