Local users can start Sendmail in daemon mode and gain root privileges.Referenceshttp://www.securityfocus.com/bid/716