typo - yes
fatal - shouldn't have been (IMHO)

CGI.pm is basically doing

#!/usr/bin/perl -w
use strict;

$_ = 'test1=1&&test3=3';

for ( split '&' ) {
    my($param,$value) = split '=';
    print "param='$param'\n";
    print "value='$value'\n";
    
    # and using $param even though it is undefined the 2nd time
}
[download]

You said that both versions of apache are the same but it looks like the two versions of CGI.pm are different - you can check ~ line 22 of CGI.pm for the version number.

if they are the same then I'm stumped - otherwise you should probably upgrade to the newer one at least as it looks like it is handling malformed URLs properly (this type anyway).

   larryk                                          
perl -le "s,,reverse killer,e,y,rifle,lycra,,print"