in reply to CGI.pm bug? Or Apache issue?

you're right, except for one thing, the POSTed params aren't environment variables, they are sent in the body of the request, the CGI process picks them up from its STDIN. I'm just nitpicking really.

IMHO the poster shouldn't rely on a DirectoryIndex config setting but rather identify the resource (the cgi) explicitely anyway.