Results 1 to 9 of 9
  1. #1
    Platinum Lounger
    Join Date
    Nov 2001
    Location
    Vienna, Wien, Austria
    Posts
    5,009
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Security Patch Escape Hatch - Does It Really Work? (2000 SR2)

    The following appeared recently in <A target="_blank" HREF=http://www.lockergnome/com/>Lockergnome</A>:

    "<A target="_blank" HREF=http://members.tripodnet.nl/lcroft/>Outlook 2000 / 98 Insecurity Post Patch</A>"
    "This patch is intended for users with MS Outlook 98 / 2000 and Service Pack 2, which includes a 'security fix' (called a security feature or enhancement by Microsoft) blocking all incoming attachments with the extensions like EXE and LNK. The problem: you can't undo the security fix, and you won't be able to open, save or forward (for example) a URL attachment after installing the service pack! Therefore, I wrote the Outlook Insecurity Patch. This patch will give you control about which file extensions will be blocked, or not. The patch will update the outllib.dll in your office folder and disable the security on specific extensions by your choice."

    Personally, I have avoided the "luxury" of ANY Office SP2 install due to this issue. Being likely, however, to continue with an non-XP environment for some time, the availability of (SP3?) bug fixes in other Office apps makes this policy a possible rethink.
    Gre

  2. #2
    Platinum Lounger
    Join Date
    Jan 2001
    Location
    Roanoke area, Virginia, USA
    Posts
    3,729
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Security Patch Escape Hatch - Does It Really Work? (2000 SR2)

    why would anyone trust someone who uses an alias copied from a movie to provide a hack to a dll? Any problems and MS will not provide support for it, because it was hacked. It's soooooo easy to bypass the attachment block with valid programs provided by people that use real names, that there is no need for that utility.

    To find out how to get blocked files off
    <A target="_blank" HREF=http://www.slipstick.com/outlook/esecup/getexe.htm>http://www.slipstick.com/outlook/esecup/getexe.htm</A>


    For more information on the security features
    <A target="_blank" HREF=http://www.slipstick.com/outlook/esecup.htm>http://www.slipstick.com/outlook/esecup.htm</A>

  3. #3
    Platinum Lounger
    Join Date
    Nov 2001
    Location
    Vienna, Wien, Austria
    Posts
    5,009
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Security Patch Escape Hatch - Does It Really Work? (2000 SR2)

    Thanks MaryJ.
    I knew I'd seen something else some time back, but couldn't seem to find it among the threads. <img src=/S/bravo.gif border=0 alt=bravo width=16 height=30>
    Gre

  4. #4
    Star Lounger
    Join Date
    Dec 2001
    Location
    Birmingham, Alabama USA
    Posts
    95
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Security Patch Escape Hatch - Does It Really Work? (2000 SR2)

    Not sure about Oulook 98 and 2000 ... but in Outlook 2002 (XP) you can alter the files that Microsoft has deemed "unsafe" via the Registery. Follow the link below for information on how this can be done.

    <A target="_blank" HREF=http://support.microsoft.com/default.aspx?scid=kb;EN-US;q290497>Cannot Access Attachments - Outlook 2002</A>

    HTH
    RDH
    Ricky Hicks
    Microsoft MVP
    Birmingham, Alabama USA

  5. #5
    2 Star Lounger
    Join Date
    Sep 2001
    Location
    Kalgoorlie, Western Australia, Australia
    Posts
    155
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Security Patch Escape Hatch - Does It Really Work? (2000 SR2)

    MJ

    Is there a program/add-in that fixes the attachments SP 2 for Outlook, at the Slipstick site I couldn't find anything. Maybe I just can't see for the looking <img src=/S/smile.gif border=0 alt=smile width=15 height=15>

    Thanks

  6. #6
    Platinum Lounger
    Join Date
    Jan 2001
    Location
    Roanoke area, Virginia, USA
    Posts
    3,729
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Security Patch Escape Hatch - Does It Really Work? (2000 SR2)

    yes and no. at the getexe.htm page, there are several addins intended for other purposes that effectively allow access to the attachments, but there is not an add in specifically to provide access, such as the one for outlook 2002 has. Thats because only outlook 2002 has the registry key that allows access.

  7. #7
    Platinum Lounger
    Join Date
    Nov 2001
    Location
    Vienna, Wien, Austria
    Posts
    5,009
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Security Patch Escape Hatch - Does It Really Work? (2000 SR2)

    Melissa

    The section you need to look at on MaryJ's first link is "Tools"
    Gre

  8. #8
    5 Star Lounger
    Join Date
    Feb 2001
    Location
    Youngstown, Ohio, USA
    Posts
    705
    Thanks
    1
    Thanked 0 Times in 0 Posts

    Re: Security Patch Escape Hatch - Does It Really Work? (2000 SR2)

    I have SP2 installed both at work (required) and at home (by choice). I have managed to get some control back, however, by applying a "fix" that Lockergnome reported late November. Instead of installing yet another patch, this fix involves editing the OUTLLIB.DLL file. In brief, grab yourself a hex editor, open the dll file, and search for 'mdb' or some other restricted file-type extension. You will eventually find a bunch of them clustered together. For any file type that you want to restore access to, simply change (NOT delete) the extension to something else -- but be sure that it is not a valid extension for some other file type that you would want to receive as an attachment. With one little change I can now send and receive 'url' attachments, which fixes the little "Send Link" problem between IE and Outlook (though Outlook will now block any 'xxx'-type files).

    If you don't have a hex editor, there are a number of shareware programs that can be downloaded. I used Cygnus from <A target="_blank" HREF=http://www.softcircuits.com>SoftCircuits</A> -- the free 30 day trial period is more than adequate, and unlike some of the other shareware editors I tried, this demo version is capable of handling and saving the 5+ meg file.

    Standard issue warning: Be sure to make a backup copy of OUTLLIB.DLL before you start tinkering.
    Attached Images Attached Images

  9. #9
    Platinum Lounger
    Join Date
    Jan 2001
    Location
    Roanoke area, Virginia, USA
    Posts
    3,729
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Security Patch Escape Hatch - Does It Really Work? (2000 SR2)

    there are something like 9 ways of getting the files off *without* hacking the dll and all are much safer. At least 4 methods use existing addins that have been around for years. (chilton preview, zone alarm, WYB, exlife)

    See <A target="_blank" HREF=http://www.slipstick.com/outlook/esecup/getexe.htm>http://www.slipstick.com/outlook/esecup/getexe.htm</A>

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •