Hi, I'm running WordPress 1.5.2 with PHP 4.3.10 and Apache 1.3.33 on my Debian GNU/Linux
And I found this problem in accidental.
1.Create an new password protected post and set categories to "protected"
2.Access it through follow URL:
In my case, the page can be access without enter password!