Changing Account password using rules
The best way would be to make a custom page using hook_menu(), and have a submit function on that page that would check the user's authentication, and if it was correct, change the current password.

If you need a bit more information on that, I'm happy to help.