NDS-1035 fixed passwords containing regex operators (e.g $) for new accounts, but I expect that the change password form likely suffers the same bug.

This ticket is complete when the problem has been confirmed and fixed.