Even ssh will open a shell on the remote end. The best solution I think is to open the password receiving command reading from a pipe, instead of passing the password with echo or whatever unix command.

# Untested example. Modify to your needs
open my $pipe_command, "|-", "ssh $hostname 'passwd --stdin bob'";
print $pipe_command "$password\n";
close $pipe_command;
[download]