strace allows local users to read arbitrary files via memory mapped file names.
paul kranenburg strace
linux linux kernel 2.3.20