[Full-disclosure] defining 0day

coderman coderman at gmail.com
Sun Apr 20 00:44:37 BST 2008


On Sat, Apr 19, 2008 at 3:44 PM, n3td3v <xploitable at gmail.com> wrote:
> ...
>  I just caught a news article that summed up nicely what 0day means...
>
>  "A zero-day flaw is a software vulnerability that has become public
>  knowledge but for which no patch is available. It is particularly
>  dangerous since users are exposed from day zero until the day a vendor
>  prepares a patch and notifies users it is ready."

this is still incorrect.

as discussed previously: 0day is a perspective.

if it comes from out of no where and pwns your ass, it is 0day.

where you are on the vulnerability disclosure time-line determines
your perspective.  one man's 0day is another man's old news.




Full-Disclosure is hosted and sponsored by Secunia.