COMMAND

    PayPal

SYSTEMS AFFECTED

    PayPal

PROBLEM

    Levi Ruiz  found following.   A recent  encounter with  PayPal has
    made him discover a fairly serious DOS condition with PayPal.   If
    the user was to input the wrong password 3 times then PayPal  will
    automatically  disable  that  users  account  and issue them a new
    password via USPS.   When he did  this, it took  nearly a week  to
    get that letter and until then his account was useless.  Calls and
    e-mails to PayPal went unanswered.

    If someone was to do  something as simple as harvest  PayPal users
    from eBay  or some  other way,  all they  would have  to do is try
    logging in as those people three times then effectively lock  them
    out of PayPal for a week.

SOLUTION

    Nothing yet.