It's possible to cause infinite reply loops with spoofed UDP packets with bith source and destination ports 1745 between 2 servers on from server to itself.
vulners.com/securityvulns/securityvulns:doc:4370
vulners.com/securityvulns/securityvulns:doc:4371