CVE-2024-58299 is a stack-based buffer overflow vulnerability in PCMan FTP Server 2.0 affecting the 'pwd' command. Remote attackers can exploit this vulnerability by sending a crafted payload during the FTP login process, leading to arbitrary code execution. The vulnerability requires no privileges or user interaction and has high impact on confidentiality, integrity, and availability. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on all security properties.

Successful exploitation allows remote attackers to execute arbitrary code on the affected system, potentially leading to full system compromise. The vulnerability affects confidentiality, integrity, and availability of the server. Since no authentication is required, this poses a significant risk to any deployment of PCMan FTP Server 2.0 exposed to untrusted networks.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, it is recommended to restrict network access to the FTP server, disable the vulnerable 'pwd' command if possible, or replace the software with a secure alternative. Monitor vendor channels for updates and apply patches promptly once available.