Gallery 1.3.3 creates directories with insecure permissions, which allows local users to read, modify, or delete photos.
bharat_mediratta gallery 1.3.3