The rc system startup script for FreeBSD 4 up to and including 4.5 allows local users to delete arbitrary files via a symlink attack on X Windows lock files.
freebsd freebsd 4.5