You're getting the "premature end of script headers" because you forgot to send the HTTP header ahead of your html:

print "Content-type: text/html\n\n";
[download]

You can also do this (and some would say should do this) with the CGI module's header method.

Update 2003-02-25: Oops! chromatic (see below) is correct. The header is there, buried up top where I didn't see it.