The debug command in Sendmail is enabled, allowing attackers to execute commands as root.
CVSS Metrics