dxconsole in DEC OSF/1 3.2C and earlier allows local users to read arbitrary files by specifying the file with the -file parameter.
https://euvd.enisa.europa.eu/vulnerability/EUVD-1999-1084
http://www.tao.ca/fire/bos/0209.html
http://www.iss.net/security_center/static/7138.php