There's some more information on that as well as other CGI security issues in Essential CGI Security Practices. You may also want to read The WWW Security Faq.