The Session layer is one of the less glorious of the seven, its valuable role often being ignored. We're going to give it the love it deserves, though. The Session layer is responsible for the maintenance of communication between two points. When you request communication with another point, such as a website, the Session layer is engaged in order to establish that communication - and then it stays into play ensuring that the session remains open and functional. When you are finished with your communication, the Session layer performs what is known in TCP as a "graceful close", ensuring that the link is terminated.
Layer 5 figures heavily into environments that make use of Remote Procedure Calls (RPC). Layer 5 and RPCs have the potential of being exploited and abused. There are hacking scripts that will continually open sessions with a machine and not let them close, essentially overwhelming the resources of a computer. This will ultimately either lead to shutdown and reboot, or worse: If paging is enabled on the computer's hard disk, this situation can be exploited to write malicious code to the disk, corrupting the entire machine. Think of it this way: Imagine a whole group of people wanting to shake your hand, and then not letting go. By the time the third hand is extended, you don't have an available hand to intercept and the open palm instead morphs into a slap in the face.