CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

ftp/tnftpd 20231001_1

Enhanced FTP server from NetBSD

Port info

Maintainer
cejkar@fit.vutbr.cz
Packages
latest: 20231001_1
Upstream
up to date
Last update
to 20231001_1 · ce57471078
Quarterly
2026Q4: 20231001_1
Formerly
ftp/lukemftpd until 2004-08-18
WWW
https://ftp.netbsd.org/pub/NetBSD/misc/tnftp/
Links
cgit · VuXML

Install

Package
# pkg install tnftpd
installs 20231001_1 from latest; from quarterly (2026Q4) 20231001_1
Port
# cd /usr/ports/ftp/tnftpd && make install clean
# make -C /usr/ports/ftp/tnftpd config  # change options first
Size
87 KiB download · 191 KiB installed
Depends on
nothing
License
BSD2CLAUSE and BSD3CLAUSE
Options
2 of 2 on in the package: DOCS EXAMPLES
pkg-message
Shown after installing
This port relies on a number of configuration files in /usr/local/etc.
At the very least, create a ftpusers file with the usernams of users you don't
want to connect (root, toor, etc.). This will allow non-listed users to log in.
Copying /etc/ftpusers to /usr/local/etc/ftpusers should be sufficient.

See the man pages and examples in /usr/local/share/examples/tnftpd for more
information. The man pages and configuration files for FreeBSD's built-in ftpd
can also be of use as examples/additional info.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 1620231001_120231001_1–
FreeBSD 1520231001_120231001_1–
FreeBSD 1420231001_120231001_120231001_1

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 1520231001_120231001_1–
FreeBSD 1420231001_120231001_120231001_1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 20231001_1.

Fixed (2)

Show 2 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (52)

Muhammad Moinur Rahman (bofh) · 20231001_1
ftp/tnftpd: Moved man to share/man

Approved by:    portmgr (blanket)
ce57471078
Nuno Teixeira (eduardo) · 20231001
ftp/tnftpd: Update to 20231001

While I'm here:

- Switch to DISTVERSION as suggested by Porters Handbook
- Make use of NetBSD's CDN and add a few additional mirrors
- Add WWW url
- Add license:

  [1]
  tnftpd contains a mix of BSD2CLAUSE (mostly the NetBSD
  derived code) and BSD3CLAUSE (inherited from the orignal UCB BSD code).

  tnftpd was previously BSD4CLAUSE but that was fixed in the upstream code
  a while ago so I changed the COPYING to reflect that. It's no more
  restrictive than BSD3CLAUSE now.

ChangeLog:

* Release as "tnftpd 20231001".

* Always use $YACC even without --enable-maintainer-mode.

* Update to NetBSD-ftpd 20230930:
	* Fix uninitialized memory usage in count_users().
	* Fix pam_set_item() call with proper struct passed as
	PAM_SOCKADDR.

* Build fixes:
	* Check for inet_net_pton() in -lresolv (for glibc).
	* Improve configure's display of make variables.
	* Remove deprecated autoconf macros.

* Security fixes:
	* CVE-2020-7468: Improve error handling when switching UID/GID.
	* Prevent MLSD and MLST before authentication succeeds.

* Update to NetBSD-ftpd 20230922:
	* Treat failed chdir/chroot for guest and chroot accounts as
	fatal. Also treat failed set{e,}(u,g}id calls as fatal.
	Addresses CVE-2020-7468, via FreeBSD.
	* Improve seteuid error handling, per suggestion by Simon
	Josefsson.
	* Add missing check_login checks for MLST and MLSD.

* Sync libnetbsd replacements with NetBSD upstream:
	* Replace fgetln() with tools/compat implementation that
	handles embedded NULs.
	* Fix inet_net_pton() to avoid integer overflow in bits.
	* Fix inet_ntop() to set errno when returning NULL.
	* Fix inet_pton() to improve hex formatting.
	* Fix sl_add() to not update size unless realloc() succeeds.

* Improve portability on NetBSD by providing own setprogname()
and getprogname(), instead of defining global __progname.

* Update example ftpusers to use example DNS and IP addresses.

* Build fixes:
	* Improve configure's display of detected features.
	* Enable more POSIX extensions.
	* Only replace glob() if required GLOB_ flags aren't available.
	* Only replace fts_open() if required FTS_ flags aren't
	available.

Suggested by:	[1] Luke Mewburn <lukem@NetBSD.org>
PR:		274209
MFH:		2023Q4
6845ef2aab
Tobias C. Berner (tcberner) · 20200704
ftp: remove 'Created by' lines

A big Thank You to the original contributors of these ports:

  *  Aaron Dalton <aaron@FreeBSD.org>
  *  Alexander Kriventsov
  *  Anders Nordby <anders@fix.no>
  *  Andreas Fehlner <fehlner@gmx.de>
  *  Andrew Pantyukhin <infofarmer@FreeBSD.org>
  *  Andrey Zakhvatov
  *  Antonio Carlos Venancio Junior (<antonio@inf.ufsc.br>)
  *  Chris Piazza <cpiazza@FreeBSD.org>
  *  Damjan Marion <dmarion@open.hr>
  *  Emanuel Haupt <ehaupt@critical.ch>
  *  Eric Freeman <freebsdports@chillibear.com>
  *  Frank DENIS
  *  Frank Laszlo <laszlof@vonostingroup.com>
  *  Gea-Suan Lin (gslin@ccca.nctu.edu.tw)
  *  Gea-Suan Lin <gslin@ccca.nctu.edu.tw>
  *  George V. Neville-Neil <gnn@FreeBSD.org>
  *  Hye-Shik Chang
  *  Jordan Hubbard <jkh@FreeBSD.org>
  *  Jose Alonso Cardenas Marquez <acardenas@bsd.org.pe>
  *  Joseph Benden <joe@thrallingpenguin.com>
  *  Ju Pengfei <jupengfei@gmail.com>
  *  Jui-Nan Lin <jnlin@freebsd.cs.nctu.edu.tw>
  *  Mark Johnston <markj@FreeBSD.org>
  *  Martin Matuska (mm@FreeBSD.org)
  *  Marwan BURELLE <marwan.burelle@lri.fr>
  *  Maxim Ignatenko
  *  Maxim Sobolev <sobomax@FreeBSD.org>
  *  Neil Blakey-Milner
  *  Neil Blakey-Milner <nbm@rucus.ru.ac.za>
  *  Nick Leuta
  *  Nosov Artem <chip-set@mail.ru>
  *  Petr Holub <hopet@ics.muni.cz>
  *  Philippe Le Berre <philippe@le-berre.com>
  *  Piotr Kubaj <pkubaj@anongoth.pl>
  *  Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  Roman Bogorodskiy
  *  Sergey Matveychuk <sem@FreeBSD.org>
  *  Sergey Skvortsov <skv@FreeBSD.org>
  *  Stephane Legrand
  *  Sunpoet Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  TAKATSU Tomonari <tota@FreeBSD.org>
  *  Thomas Gellekum <tg@FreeBSD.org>
  *  Tom McLaughlin <tmclaugh@sdf.lonestar.org>
  *  Tomokazu ISHII <t-ishii@tryplanet.com>
  *  Ulrich Spoerlein <uspoerlein@gmail.com>
  *  Wen Heping <wen@FreeBSD.org>
  *  Xavier Beaudouin <kiwi@oav.net>
  *  Yasuhiro Fukuma <yasuf@big.or.jp>
  *  Ying-Chieh Liao <ijliao@FreeBSD.org>
  *  ache
  *  cy@FreeBSD.org
  *  ijliao
  *  ports
  *  torstenb
  *  will

With hat:	portmgr
30cd242001
Mathieu Arnold (mat) · 20200704
Remove # $FreeBSD$ from Makefiles.
305f148f48
Fernando Apesteguía (fernape) · 20200704
ftp/tnftpd: update to 20200704

Includes fix for clang11 -fno-common issue
While here, pet linters.

PR:	248831
Submitted by:	cejkar@fit.vutbr.cz (maintainer)
MFH:	2020Q3 (build fix, fno-common)
114a831ecb
Baptiste Daroussin (bapt) · 20130325
Drop the ipv6 virtual category for f* category as it is not relevant anymore
06c273daa8
Mathieu Arnold (mat) · 20130325
Convert to UCL & cleanup pkg-message (categories e-g)
79698c8457
Alexey Dokuchaev (danfe) · 20130325
Spell FTP properly (uppercased) when it does not refer to a command name.
d305ba17ca
Dmitry Marakasov (amdmi3) · 20130325
- Drop 8.x support - Switch to options helpers

Approved by:	portmgr blanket
9da516a7d6
Baptiste Daroussin (bapt) · 20130325
Convert to USES=autoreconf
8c498ac961
Dmitry Marakasov (amdmi3) · 20130325
- Switch to USES=libtool

Approved by:	portmgr blanket
eecf6c99aa
Adam Weinberger (adamw) · 20130325
Resolve unnecessary bsd.port.options.mk inclusion by using OPTIONS helpers.

Approved by:	portmgr (blanket)
660fc56a82
Adam Weinberger (adamw) · 20130325
STAGE support.
b35e1c83c1
Baptiste Daroussin (bapt) · 20130325
Add NO_STAGE all over the place in preparation for the staging support (cat: ftp)
1640537ad6
Martin Wilke (miwi) · 20130325
- Update to 20130325

PR:		177377
Submitted by:	Rudolf Cejka <cejkar@fit.vutbr.cz> (maintainer)
0f09f53d20
Ade Lovett (ade) · 20100324
Update autoconf to 2.69 and automake to 1.12

PR:		166836
Tested by:	Multiple -exp runs (pav)
6d726b6c09
Martin Wilke (miwi) · 20100324
- Get Rid MD5 support
a9481afc8a
Ade Lovett (ade) · 20100324
Sync to new bsd.autotools.mk
4a8684e352
Ade Lovett (ade) · 20100324
Round one migration of ports from automake{19,110} to automake111
7e80cde328
Wesley Shields (wxs) · 20100324
Update to 20100324

PR:		ports/150499
Submitted by:	Rudolf Cejka <cejkar@fit.vutbr.cz> (maintainer)
bc59a3eafe
Martin Wilke (miwi) · 20080609
- Mark BROKEN on HEAD: fails to build with new utmpx

Reported by:	pointyhat
80b7e09305
Beech Rintoul (beech) · 20080609
- Remove pkg-message

Reported by:	Yarema <yds@coolrat.org> (maintainer)
d3344e4256
Beech Rintoul (beech) · 20080609
- Update to 20080609

PR:		ports/126749
Submitted by:	Yarema <yds@CoolRat.org>
Approved by:	Rudolf Cejka <cejkar@fit.vutbr.cz> (maintainer)
6d5be51723
Markus Brueffer (markus) · 20061204_1
- Fix plist if NOPORTDOCS is defined - Bump PORTREVISION

Approved by:	maintainer
5cb444e1fb
Martin Wilke (miwi) · 20061204
- Update to 20061204

PR:		ports/106700
Submitted by:	Rudolf Cejka <cejkar@fit.vutbr.cz> (maintainer)
ae012243f6
Martin Wilke (miwi) · 20040810_1
- Fix root exploid

PR:		ports/106594
Submitted by:	Sergey N. Voronkov <serg@tmn.ru>
Approved by:	maintainer
Security:	http://www.vuxml.org/freebsd/e969e6cb-8911-11db-9d01-0016179b2dd5.html
cda86e054f
Edwin Groothuis (edwin) · 20040810
Remove USE_REINPLACE from all categories starting with F
c8a818ace5
Edwin Groothuis (edwin) · 20040810
SHA256ify

Approved by:    krion@
0bb0ea5bd7
Volker Stolz (vs) · 20040810
Update to 20040810, which contains latest security fixes

PR:		ports/70624
Submitted by:	Rudolf Cejka (maintainer)
142882e1de
David E. O'Brien (obrien) · as ftp/lukemftpd
Go ahead and rush the 2004-08-30 deprecatation since the port is now FORBIDDEN due to a vulerability.  I really don't think anyone is going to put the effort into un-FORBIDDENing it.
337eb9844b
Jacques Vidrine (nectar) · 20031217_1
Mark forbidden due to remotely exploitable vulnerability. http://vuxml.freebsd.org/c4b025bb-f05d-11d8-9837-000c41e2cdad.html
1f09de5154
Jacques Vidrine (nectar) · 1.1_1 · as ftp/lukemftpd
Mark forbidden due to remotely exploitable vulnerability. http://www.vuxml.org/freebsd/c4b025bb-f05d-11d8-9837-000c41e2cdad.html
0428bea829
Tilman Keskinoz (arved) · 1.1_1 · as ftp/lukemftpd
Mark deprecated, Port was renamed to tnftpd (already in ports), has no maintainer, and is broken on CURRENT.
a5b3bd232f
Tilman Keskinoz (arved) · 20031217_1
Fix build with gcc 3.4

PR:		70202
Submitted by:	Rudolf Cejka <cejkar@fit.vutbr.cz>
ec83f9d228
Volker Stolz (vs) · 20031217_1
Handle files over 4GB.

PR:		ports/66741
Submitted by:	Rudolf Cejka (maintainer)
6547017c58
Kirill Ponomarev (krion) · 1.1_1 · as ftp/lukemftpd
- Fix MASTER_SITES

PR:		ports/66703
Submitted by:	Roman Neuhauser <neuhauser@chello.cz>
1df6af8c13
Trevor Johnson (trevor) · 20031217
Add size data, approved by maintainers.
3bca696b10
Pav Lucistnik (pav) · 20031217
- Update to 20031217 snapshot

PR:		ports/62069
Submitted by:	Rudolf Cejka <cejkar@fit.vutbr.cz> (maintainer)
4f8677eb55
Pav Lucistnik (pav) · 2.0b3_1
- Give maintainership to Rudolf Cejka, who uses this daemon   to power ftp-master.cz.FreeBSD.org

Submitted by:	Rudolf Cejka <cejkar@fit.vutbr.cz>
cdceb588c5
Pav Lucistnik (pav) · 2.0b3_1
- Rip post-install echo block into standalone pkg-message - Quiet portlint on RUN_DEPENDS
2056d34e2e
Pav Lucistnik (pav) · 2.0b3_1
- Add support for utmp/wtmp - Bump portrevision

PR:		ports/61722
Submitted by:	Rudolf Cejka <cejkar@fit.vutbr.cz>
6fac5f5979
Edwin Groothuis (edwin) · 2.0b3
New port: ftp/tnftpd (obsoletes ftp/lukemftpd)

tnftpd (formerly known as lukemftpd) is a port of the
	enhanced NetBSD ftp server to other systems

PR:		ports/55229
Submitted by:	Alex Vasylenko <lxv@send-pr.sink.omut.org>
f6a904c04f
Edwin Groothuis (edwin) · 1.1_1 · as ftp/lukemftpd
- ECHO -> ECHO_MSG

for some ports:
- pre-fetch -> pre-everything

PR:		ports/56785-56799
Submitted by:	KATO Tsuguru <tkato@prontomail.com>
34171d18e7
Daichi GOTO (daichi) · 1.1_1 · as ftp/lukemftpd
update ftp/lukemftpd: drop maintainer ship

PR:		48388
Submitted by:	Rudolf Cejka <cejkar@fit.vutbr.cz>
Apporved by:	maintainer (timeout)
f4ef5a2dc8
Pete Fritchman (petef) · 1.1_1 · as ftp/lukemftpd
Give maintainership to Anders Nor Berle <debolaz@debolaz.com> from ports@.

Submitted by:	Anders Nor Berle <debolaz@debolaz.com>
8849b8b173
Pete Fritchman (petef) · 1.1_1 · as ftp/lukemftpd
Set maintainer to ports@FreeBSD.org

Submitted by:	Anders Nordby <anders@fix.no> (previous maintainer)
afbebb0cfe
Daniel Harris (dannyboy) · 1.1_1 · as ftp/lukemftpd
Fix wtmp and utmp logging.

PR:		27720
Submitted by:	maintainer
d9c0b1517f