In order to do its job, Sendmail must run as root. Combine this with the fact that Sendmail is a very popular program, and you have a very tempting target for hackers.

Sendmail attacks can come in two basic forms: attacks from a remote system, or attacks from users on your own system.