vi.recover in OpenBSD prior to 3.1 allows local users to remove arbitrary zero-byte files such as device nodes.
openbsd openbsd 2.9
openbsd openbsd 3.0