"To overcome these limitations, we drew inspiration from the Morris worm, which exploited the DEBUG vulnerability in Sendmail by executing the body of a mail as a shell script:"

https://www.openwall.com/lists/oss-security/2020/01/28/3