What should the write permissions be for our WPMU network?

Our network sites cannot upload files. The write permissions on the blog.dir is 755, but they cannot upload. I have to change it to 777, but doesn’t that open it up for attack?