full-disclosure - Gnumeric and Applix can modify locked Excel files?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <Pine.BSI.4.58.0405211124280.2733@dave.horsfall.org>
From: dave at horsfall.org (Dave Horsfall)
Subject: Gnumeric and Applix can modify locked Excel files?

I found I was able to modify a supposedly password-locked Excel file
without the password, with Gnumeric (a free *nix clone of Excel) and
Applix (a commercial *nix clone of Office).

To test this further (since I don't do Windoze) would anyone happen to
have some non-sensitive locked spreadsheets that they could share with me?

You can get the spreadsheet from http://horsfall.org/ft100memory0504.xls
(but be gentle, as it's a slow link; there's nothing interesting there).

-- Dave